Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/814752c4-1bd0-3847-9859-910170cbf846.roa
File:                     814752c4-1bd0-3847-9859-910170cbf846.roa (raw, json)
Hash identifier:          eGryJWU0+aLAmWnCjd+I63Kl6LhWx0NyxRqkJxu1riw=
Subject key identifier:   72:72:56:90:FE:1B:EA:D6:28:48:8F:FB:E8:BF:2D:E5:08:CB:C1:93
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA464380FB2E18AFD3375AFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/814752c4-1bd0-3847-9859-910170cbf846.roa
Signing time:             Wed 20 Apr 2022 12:00:00 +0000
ROA not before:           Wed 20 Apr 2022 12:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.129.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a4:64:38:0f:b2:e1:8a:fd:33:75:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 20 12:00:00 2022 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=e2815d73-72b8-45c4-83c7-bc9ab07a034a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:f7:4d:d8:8c:06:80:89:60:d4:b1:65:f2:
                    b8:f3:bd:d6:c1:80:f8:42:4a:02:e0:8b:c6:63:96:
                    fd:ff:5b:f3:75:c3:c6:aa:ea:f5:14:74:c4:dd:20:
                    08:14:0d:6f:ed:1c:cf:e4:93:3b:08:a9:ca:29:85:
                    09:b1:dd:da:e9:93:5e:e4:77:cd:c0:c9:02:d8:df:
                    0d:c5:65:44:e9:5c:00:f7:d9:af:66:d3:e3:2c:34:
                    ea:45:fc:a0:1c:14:54:6e:0a:66:46:c2:81:2e:65:
                    6c:b2:d5:2c:a4:15:78:5b:fa:73:6b:7c:21:a9:35:
                    22:58:4c:4f:db:0e:32:9c:b8:c8:8f:df:ea:17:ea:
                    cd:fa:c5:b2:3f:03:e3:32:a1:83:fe:64:80:a1:cb:
                    00:c7:a3:8b:61:8e:5b:b1:ad:4a:6f:3e:e3:56:18:
                    12:12:05:6b:3a:58:f9:00:93:d5:ce:8c:bd:f6:02:
                    6e:0d:37:20:b2:03:20:c9:49:08:86:88:88:d9:e6:
                    bb:06:34:4b:54:a2:c4:15:71:e9:e7:cd:19:81:b6:
                    e3:56:32:08:02:cf:36:e1:c5:8d:bd:ea:57:52:3b:
                    9e:55:5e:28:f5:7a:1a:b7:0f:85:7b:67:53:25:c2:
                    e7:bd:45:ae:6a:7a:a1:36:68:5d:50:f5:fa:9c:57:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:72:56:90:FE:1B:EA:D6:28:48:8F:FB:E8:BF:2D:E5:08:CB:C1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/814752c4-1bd0-3847-9859-910170cbf846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fc:0c:54:e7:24:81:27:38:87:38:6c:7b:9f:98:a7:80:f2:
         dd:cb:d0:b1:dd:50:1e:f3:a8:22:d7:96:05:ad:16:39:a4:b2:
         9e:87:68:9d:5c:ed:42:0d:c0:9c:6d:7b:e4:b0:be:aa:60:2b:
         bd:62:c7:2a:cd:c9:5e:a2:4b:4c:99:d3:2b:d3:73:65:23:3c:
         d3:cc:4d:60:fa:05:4b:20:d8:ad:dd:2f:db:06:ba:68:84:b2:
         bf:8f:99:89:b5:5f:e3:4c:50:e6:41:ac:3d:e5:c9:c5:82:0a:
         b4:1c:b8:97:29:67:07:af:f5:ac:9d:de:9b:19:2c:23:b1:cc:
         7f:64:97:64:df:31:aa:46:29:c8:90:da:28:b8:4a:92:27:6d:
         4e:9b:1a:f1:38:93:fa:a1:0c:c5:b4:f0:6e:12:e3:70:7a:08:
         5c:5c:9c:6f:12:ec:4c:79:d6:2b:b6:e8:77:ed:b1:9b:a2:4b:
         30:88:ab:8b:6c:e6:24:d8:13:78:f9:94:c5:97:ae:8e:79:49:
         c6:a9:1a:19:ac:11:9c:6a:99:ba:05:e7:f2:96:aa:91:4a:98:
         6d:d6:f2:ef:5c:43:68:cc:ce:60:16:a0:f9:2b:04:4c:71:46:
         2e:4d:21:20:43:9b:74:63:b8:13:3d:9b:74:d6:c6:73:0c:0d:
         98:20:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----